Resource limits and priority classes for k8s
Description
We should add resource limits for each namespace, to prevent people hogging resources (by accident or not).
We should also set priority classes for our core stuff - most of it will be high/critical. This prevents eg traefik getting evicted to run someone else's app.
Resources
- k8s resource limits docs
- Kyverno policy which auto-creates an object when a namespace is created with a specific label
- k8s priority classes docs
- manifest repository which almost all core services are spun up from.
Edited by Aria Shrimpton